last executing test programs: 6.840839611s ago: executing program 2 (id=2322): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000016c0)='H', 0x1}], 0x1) 5.766066046s ago: executing program 0 (id=2325): syz_usb_connect(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.511799606s ago: executing program 2 (id=2328): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1", 0xa2}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25", 0xb8}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3", 0x6c}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000040)="e83435e518b8341b4c2d2be8835e524bea43271e707ac2378ba73466451973d15b5c52", 0x23}, {&(0x7f00000002c0)="8c90541ae537d6394475728b49ded9b11224c42e5e44d1f3475487392160a329c09c08fa1353f93a4e819736a0d1d80a69aa1c158877d97c0967b08914c6cb4fff684365293b665e376491519be276a6f84396d7560e155ed90d1506771a00dace610d4c0215b8acee2a84fa3cf700"/122, 0x7a}, {&(0x7f00000034c0)="7c0b4e572eaaebaac9192ed69504d613a5bd61cb5fa43831d69704642549092ddd13dc61e0c7b8c64d48ed0cec6f1539a237ec44bf382b38e78b7c9e0764842b083dafbd7319eceda2ce8a8a264e8ea84679ff025924774a10d7c537209da06fe2214e2fa59e355d0777fbe81fd3f98778da88d6c9b70d814499854876c9c38e54daaa56ec729ee356f2923a5e471aa4d6afd2bdb7a15cdd19f9880e621379d0edde8d9fd932f9efb7043b98198333ee04bbe50fb22e0800000000000000", 0xbe}, {&(0x7f0000000380)="1c6d4fbfb882a00994a9aaaccb4ef4bc0c2a8c64021649b8e15dc76fd99160d1d0531461a78657b0f01b6e570d200c63bb79ac2428e9", 0x36}, {&(0x7f0000000400)="479e7ba004ddbd2488c4d61bdc85b23e5cc97946dc5e71168590bd95a89257a1ba7bef58b01e01c951ccf8650b9e8ea5b05a599082985e9288cb93e541cc7959be66c5ee7d3d1a62f93a679e", 0x4c}, {&(0x7f0000003740)="eddf0f41b7e01c2bc8dbef4a2c989ef886006115d4dd550bfc8cee83e8ed7feb1fd708354b6b143b85ea0f00a09c6d1f6a28", 0x32}], 0x6) 4.295696907s ago: executing program 1 (id=2330): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xaee5, 0x0, 0x2, 0x1f6}, &(0x7f0000000380)=0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x8000) fcntl$getownex(r5, 0x10, &(0x7f0000000c80)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) r6 = syz_io_uring_setup(0x509, 0x0, 0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r6, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 3.593310862s ago: executing program 0 (id=2333): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYBLOB="0000000200000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {0x0, 0xffff}, {0xffff, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3.59232362s ago: executing program 2 (id=2334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r1, 0x0, &(0x7f0000000100)={0x8, 0x100000000008}, 0x0) 3.499094048s ago: executing program 0 (id=2335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5, [{0x9, 0x72, 0xb, 0xffffffff, 0xfffffffb, 0xfff}]}, [{0x7, 0x8, 0x2, 0x80000001, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff0, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x7fffffff, 0x3, 0x7}, {0x101, 0x9, 0x410, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5352, 0x74d77b97, 0xfffffd8b, 0x0, 0x1}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x5, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x94, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x6, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xa6, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x205}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x0, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x7, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0xfff, 0x101, 0x5, 0xfffffc01, 0x800}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0x0, 0x2}, {0x8, 0x7, 0x8, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x3}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x9, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x2, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0x1, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x8000052, 0x8, 0x8, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0x7}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x3, 0x4, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb5c, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0x9}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x1ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x4, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x80000001, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x6, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0xb, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x7, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0x6, 0x80000000, 0x2, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0xd8, 0xe, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x9, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x9}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x4, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x7, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x5}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3.464132492s ago: executing program 2 (id=2336): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0xfffffffffffffd5f, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200004, 0x0, 0x0, 0xfffffffd, 0x8003}}}}]}, 0x4c}}, 0x90) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 2.723838042s ago: executing program 1 (id=2339): socket(0x10, 0x3, 0x0) socket$kcm(0x11, 0xa, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xd8, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x8c, 0x2, [@TCA_BASIC_ACT={0x88, 0x3, [@m_sample={0x40, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x44, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x13, 0x6, "6f3e464680b8dcb925d3c8416db18e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[], 0x0) 2.539393277s ago: executing program 2 (id=2341): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4, 0x0, &(0x7f0000000940)="ef95e112ba061e6e66d1", 0xa, 0x2}, {0x1, 0x3, 0x0, &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80), 0x0, 0x32}, {0x1, 0x80000001, 0x0, &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a", 0xaf, 0xa}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5b, 0x14, {{'cmac(aes)\x00'}, 0x78, 0x0, "3509fe8fd57fd44aa5074c50bc700e"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.536369333s ago: executing program 3 (id=2343): r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x0, 0x1}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 1.720035719s ago: executing program 3 (id=2344): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 1.62184395s ago: executing program 3 (id=2345): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000200000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {0x0, 0xffff}, {0xffff, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.244473525s ago: executing program 1 (id=2346): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.244065133s ago: executing program 2 (id=2347): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000000c0), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000300)={0x20, 0x17}, 0x0, 0x0}) 1.210768442s ago: executing program 3 (id=2348): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) 1.187162983s ago: executing program 0 (id=2349): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.087477774s ago: executing program 4 (id=2350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @broadcast}) 1.077308363s ago: executing program 4 (id=2351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.059138126s ago: executing program 1 (id=2352): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x68000, 0x314) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 934.919009ms ago: executing program 1 (id=2353): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 933.615164ms ago: executing program 0 (id=2354): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x3e, @loopback, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="fd8b3b", 0x3}], 0x1}}], 0x1, 0x24008090) 891.506684ms ago: executing program 1 (id=2355): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x5, {"c7517da9e7a8757d9c02fd45c7ed7c6a", "f61ac59ed63a57d6df15bd7dae0ceb42", "d08098bd12cdd439c06442623f678bba"}, 0x10001, 0x7}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 857.841511ms ago: executing program 4 (id=2356): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000002ec0)="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", 0x64c}, {&(0x7f0000000b80)}, {&(0x7f0000001640)="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", 0x1e7}, {&(0x7f0000000800)="a3462c", 0x3}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) 826.553754ms ago: executing program 4 (id=2357): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x200000c4, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) 715.824395ms ago: executing program 4 (id=2358): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000200000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {0x0, 0xffff}, {0xffff, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 708.647671ms ago: executing program 4 (id=2359): prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket$inet6_udplite(0xa, 0x2, 0x88) preadv(r2, &(0x7f00000000c0), 0x0, 0x111, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x800, 0x0) lseek(r3, 0xb, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xfd9, &(0x7f0000001840)=""/4057, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2002}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeffff6e, 0x0, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x8, 0x60c01) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 311.600258ms ago: executing program 3 (id=2360): socket(0x2a, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x12, 0x4, 0x0, 0x6fb, 0x8, 0xfcf, 0x7, 0x1}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x10}}, @TCA_U32_POLICE={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) 143.639324ms ago: executing program 3 (id=2361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 0 (id=2362): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): ofile [ 158.471518][ T1612] usb 3-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 158.609783][ T1612] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 158.667279][ T1612] usb 3-1: USB disconnect, device number 21 [ 158.728621][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.760913][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 158.788760][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 158.799507][ T7117] netlink: 'syz.1.380': attribute type 19 has an invalid length. [ 158.808102][ T7117] netlink: 'syz.1.380': attribute type 20 has an invalid length. [ 158.847137][ T5895] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 158.866728][ T7117] binder: BINDER_SET_CONTEXT_MGR already set [ 158.875751][ T7117] binder: 7116:7117 ioctl 4018620d 200000004a80 returned -16 [ 158.904862][ T7124] SET target dimension over the limit! [ 159.022911][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 159.037069][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.053318][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.079710][ T5895] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.090493][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.119811][ T5895] usb 5-1: Product: syz [ 159.134476][ T5895] usb 5-1: Manufacturer: syz [ 159.157279][ T5895] usb 5-1: SerialNumber: syz [ 159.166866][ T7129] input: syz1 as /devices/virtual/input/input10 [ 159.391135][ T5895] usb 5-1: 0:2 : does not exist [ 159.402678][ T5895] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 159.402867][ T1612] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 159.422371][ T7135] syz_tun: entered allmulticast mode [ 159.435364][ T7134] syz_tun: left allmulticast mode [ 159.559365][ T5895] usb 5-1: USB disconnect, device number 21 [ 159.625461][ T1612] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.631669][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.641019][ T1612] usb 2-1: config 0 has no interface number 0 [ 159.674878][ T1612] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 159.695196][ T1612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.705296][ T1612] usb 2-1: Product: syz [ 159.712828][ T1612] usb 2-1: Manufacturer: syz [ 159.718006][ T1612] usb 2-1: SerialNumber: syz [ 159.724891][ T1612] usb 2-1: config 0 descriptor?? [ 159.736703][ T1612] usb 2-1: selecting invalid altsetting 1 [ 159.743392][ T1612] dvb_ttusb_budget: ttusb_init_controller: error [ 159.749775][ T1612] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 159.800326][ T1612] DVB: Unable to find symbol stv0299_attach() [ 159.837418][ T1612] DVB: Unable to find symbol tda8083_attach() [ 159.845215][ T1612] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 160.137204][ T5906] usb 2-1: USB disconnect, device number 22 [ 162.237526][ T7152] FAULT_INJECTION: forcing a failure. [ 162.237526][ T7152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.260421][ T7153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.393'. [ 162.268113][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.4.394 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.268143][ T7152] Tainted: [L]=SOFTLOCKUP [ 162.268149][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.268160][ T7152] Call Trace: [ 162.268167][ T7152] [ 162.268173][ T7152] dump_stack_lvl+0xe8/0x150 [ 162.268210][ T7152] should_fail_ex+0x412/0x560 [ 162.268240][ T7152] _copy_from_user+0x2d/0xb0 [ 162.268261][ T7152] do_ip_vs_get_ctl+0x2cd/0xd90 [ 162.268280][ T7152] ? __pfx___mutex_trylock_common+0x10/0x10 [ 162.268310][ T7152] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 162.268340][ T7152] ? nf_getsockopt+0x224/0x290 [ 162.268365][ T7152] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 162.268388][ T7152] ? __pfx___mutex_lock+0x10/0x10 [ 162.268409][ T7152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.268445][ T7152] nf_getsockopt+0x26e/0x290 [ 162.268471][ T7152] ip_getsockopt+0x19e/0x230 [ 162.268499][ T7152] ? __pfx_ip_getsockopt+0x10/0x10 [ 162.268519][ T7152] ? aa_sk_perm+0x6d5/0x900 [ 162.268545][ T7152] ? sock_common_getsockopt+0x2d/0xb0 [ 162.268572][ T7152] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 162.268595][ T7152] smc_getsockopt+0x1e4/0x3c0 [ 162.268615][ T7152] ? __pfx_smc_getsockopt+0x10/0x10 [ 162.268638][ T7152] ? __pfx_smc_getsockopt+0x10/0x10 [ 162.268656][ T7152] do_sock_getsockopt+0x2d3/0x3f0 [ 162.268678][ T7152] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 162.268698][ T7152] ? __fget_files+0x3a0/0x420 [ 162.268723][ T7152] ? __fget_files+0x2a/0x420 [ 162.268754][ T7152] __x64_sys_getsockopt+0x1a4/0x240 [ 162.268781][ T7152] do_syscall_64+0x14d/0xf80 [ 162.268800][ T7152] ? trace_irq_disable+0x3b/0x150 [ 162.268824][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.268842][ T7152] ? clear_bhb_loop+0x40/0x90 [ 162.268863][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.268880][ T7152] RIP: 0033:0x7fe7c059c799 [ 162.268896][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.268910][ T7152] RSP: 002b:00007fe7be7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 162.268929][ T7152] RAX: ffffffffffffffda RBX: 00007fe7c0815fa0 RCX: 00007fe7c059c799 [ 162.268941][ T7152] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 162.268952][ T7152] RBP: 00007fe7be7f6090 R08: 00002000000000c0 R09: 0000000000000000 [ 162.268963][ T7152] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.268974][ T7152] R13: 00007fe7c0816038 R14: 00007fe7c0815fa0 R15: 00007fe7c093fa48 [ 162.269002][ T7152] [ 162.434783][ T7159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.390'. [ 162.439410][ T7158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.393'. [ 162.494698][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 162.622873][ T1612] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 162.785326][ T1612] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.796743][ T1612] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.807740][ T1612] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.816908][ T1612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.837812][ T1612] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.852467][ T1612] usb 2-1: invalid MIDI out EP 0 [ 163.002708][ T1612] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 163.056840][ T42] usb 2-1: USB disconnect, device number 23 [ 163.162901][ T5895] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 163.315542][ T5895] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.324791][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.336281][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.345674][ T5895] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.359019][ T5895] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.368295][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.376449][ T5895] usb 3-1: Product: syz [ 163.380666][ T5895] usb 3-1: Manufacturer: syz [ 163.390114][ T5895] cdc_wdm 3-1:1.0: skipping garbage [ 163.395737][ T5895] cdc_wdm 3-1:1.0: skipping garbage [ 163.403737][ T5895] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 163.409856][ T5895] cdc_wdm 3-1:1.0: Unknown control protocol [ 165.766948][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 165.767293][ T1612] usb 3-1: USB disconnect, device number 22 [ 165.773673][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 165.773694][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 166.291276][ T7177] input: syz1 as /devices/virtual/input/input11 [ 166.306446][ T7177] input: failed to attach handler leds to device input11, error: -6 [ 166.608570][ T7196] F2FS-fs: Conflicting test_dummy_encryption options [ 166.745225][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 168.272853][ T5895] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 168.452924][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 168.479211][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.494265][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.504973][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.525681][ T5895] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 168.535124][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.561926][ T7218] : entered promiscuous mode [ 168.574310][ T5895] usb 4-1: Product: syz [ 168.583993][ T5895] usb 4-1: Manufacturer: syz [ 168.596567][ T5895] usb 4-1: SerialNumber: syz [ 168.912784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 169.062275][ T1612] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 169.186801][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.197688][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.244196][ T1612] usb 2-1: Using ep0 maxpacket: 32 [ 169.264191][ T1612] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 169.277162][ T1612] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 130, changing to 7 [ 169.320925][ T1612] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 169.346574][ T1612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.354918][ T1612] usb 2-1: Product: у [ 169.359025][ T1612] usb 2-1: Manufacturer: Њ [ 169.363598][ T1612] usb 2-1: SerialNumber: syz [ 169.398212][ T5895] usb 4-1: cannot find UAC_HEADER [ 169.446556][ T5895] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 169.462254][ T5895] usb 4-1: USB disconnect, device number 31 [ 169.505705][ T5890] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 169.529276][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.578826][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.587677][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.598387][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.607204][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.624642][ T1612] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 169.635232][ T1612] usb 2-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 169.664398][ T7227] FAULT_INJECTION: forcing a failure. [ 169.664398][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 169.694781][ T5890] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.722369][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.0.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.722397][ T7227] Tainted: [L]=SOFTLOCKUP [ 169.722404][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.722414][ T7227] Call Trace: [ 169.722421][ T7227] [ 169.722428][ T7227] dump_stack_lvl+0xe8/0x150 [ 169.722457][ T7227] should_fail_ex+0x412/0x560 [ 169.722487][ T7227] should_failslab+0xa8/0x100 [ 169.722509][ T7227] ? alloc_empty_file+0x55/0x1d0 [ 169.722535][ T7227] kmem_cache_alloc_noprof+0x87/0x650 [ 169.722560][ T7227] alloc_empty_file+0x55/0x1d0 [ 169.722584][ T7227] alloc_file_pseudo+0x155/0x240 [ 169.722611][ T7227] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 169.722632][ T7227] ? do_raw_spin_unlock+0xf5/0x210 [ 169.722653][ T7227] ? _raw_spin_unlock+0x28/0x50 [ 169.722667][ T7227] sock_alloc_file+0xb8/0x2e0 [ 169.722680][ T7227] ? __sys_socket+0x12b/0x1b0 [ 169.722695][ T7227] __sys_socket+0x13c/0x1b0 [ 169.722710][ T7227] __x64_sys_socket+0x7a/0x90 [ 169.722725][ T7227] do_syscall_64+0x14d/0xf80 [ 169.722735][ T7227] ? trace_irq_disable+0x3b/0x150 [ 169.722760][ T7227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.722776][ T7227] ? clear_bhb_loop+0x40/0x90 [ 169.722797][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.722812][ T7227] RIP: 0033:0x7fd3d9b9e007 [ 169.722823][ T7227] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.722832][ T7227] RSP: 002b:00007fd3daa05f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 169.722843][ T7227] RAX: ffffffffffffffda RBX: 00007fd3d9e15fa0 RCX: 00007fd3d9b9e007 [ 169.722851][ T7227] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 169.722857][ T7227] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 169.722862][ T7227] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000006 [ 169.722868][ T7227] R13: 00007fd3d9e16038 R14: 0000200000000180 R15: 0000200000000200 [ 169.722883][ T7227] [ 169.942857][ T5890] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.953751][ T5890] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.962847][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.978381][ T1612] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 169.993208][ T5890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.000862][ T5890] usb 5-1: invalid MIDI out EP 0 [ 170.010255][ T1612] usb 2-1: USB disconnect, device number 24 [ 170.166619][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.248731][ T5890] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 170.287610][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.309715][ T5890] usb 5-1: USB disconnect, device number 22 [ 170.803444][ T7256] F2FS-fs: Conflicting test_dummy_encryption options [ 172.385291][ T7270] syz_tun: entered allmulticast mode [ 172.403294][ T5895] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 172.407805][ T7269] syz_tun: left allmulticast mode [ 172.562914][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 172.651539][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 172.705448][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.716741][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.737287][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.752041][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.821565][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.045720][ T5895] usb 5-1: GET_CAPABILITIES returned 0 [ 173.083975][ T42] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 173.102930][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 173.132834][ T5950] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 173.264632][ T42] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.277106][ T42] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.339568][ T42] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.349130][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.360330][ T7268] bridge0: port 4(erspan0) entered blocking state [ 173.367560][ T5950] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.379903][ T7268] bridge0: port 4(erspan0) entered disabled state [ 173.388721][ T5950] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.401711][ T7268] erspan0: entered allmulticast mode [ 173.414338][ T42] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.424033][ T7268] erspan0: entered promiscuous mode [ 173.429572][ T7268] bridge0: port 4(erspan0) entered blocking state [ 173.436085][ T7268] bridge0: port 4(erspan0) entered forwarding state [ 173.443636][ T5950] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.453878][ T42] usb 4-1: invalid MIDI out EP 0 [ 173.461719][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.496420][ T7286] erspan0: left allmulticast mode [ 173.511931][ T7286] erspan0: left promiscuous mode [ 173.523903][ T7286] bridge0: port 4(erspan0) entered disabled state [ 173.639911][ T5818] udevd[5818]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 173.644835][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 173.667752][ T5818] udevd[5818]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 173.687551][ T797] usb 5-1: USB disconnect, device number 23 [ 173.727656][ T42] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 173.737970][ T5950] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.746844][ T5950] usb 1-1: invalid MIDI out EP 0 [ 173.757077][ T42] usb 4-1: USB disconnect, device number 32 [ 173.908298][ T5950] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 173.910294][ T7235] udevd[7235]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.929173][ T5950] usb 1-1: USB disconnect, device number 27 [ 174.266306][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 174.483069][ T42] IPVS: starting estimator thread 0... [ 174.504316][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.522066][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 174.557662][ T7307] F2FS-fs: Conflicting test_dummy_encryption options [ 174.566743][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.583085][ T7306] IPVS: using max 30 ests per chain, 72000 per kthread [ 174.601705][ T5906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 174.611059][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.623057][ T5906] usb 2-1: config 0 descriptor?? [ 174.732903][ T797] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 174.835224][ T5906] ath6kl: Failed to submit usb control message: -71 [ 174.842436][ T5906] ath6kl: unable to send the bmi data to the device: -71 [ 174.852978][ T5906] ath6kl: Unable to send get target info: -71 [ 174.868247][ T5906] ath6kl: Failed to init ath6kl core: -71 [ 174.880670][ T5906] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 174.896264][ T797] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.906927][ T797] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.918143][ T797] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.924950][ T5906] usb 2-1: USB disconnect, device number 25 [ 175.004926][ T797] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.021445][ T797] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.036005][ T797] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.045299][ T797] usb 4-1: Product: syz [ 175.054475][ T797] usb 4-1: Manufacturer: syz [ 175.108646][ T797] cdc_wdm 4-1:1.0: skipping garbage [ 175.123727][ T797] cdc_wdm 4-1:1.0: skipping garbage [ 175.180061][ T797] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 175.183597][ T7318] batadv_slave_0: entered promiscuous mode [ 175.194081][ T797] cdc_wdm 4-1:1.0: Unknown control protocol [ 175.202506][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 175.218843][ T7318] hsr_slave_0: left promiscuous mode [ 175.229870][ T7318] hsr_slave_1: left promiscuous mode [ 175.254230][ T7318] bridge0: port 3(hsr0) entered disabled state [ 175.282474][ T7318] hsr0 (unregistering): left allmulticast mode [ 175.321927][ T7318] hsr0 (unregistering): left promiscuous mode [ 175.345061][ T7318] bridge0: port 3(hsr0) entered disabled state [ 175.465542][ T7317] batadv_slave_0: left promiscuous mode [ 175.815292][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.441'. [ 177.636483][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.643101][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.649451][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.656122][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.662696][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.669294][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.676335][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.682927][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.689566][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.696164][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.702660][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.709431][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.715918][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.722509][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.729027][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.735665][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.741930][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.748508][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.754761][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.761357][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.768753][ T5890] usb 4-1: USB disconnect, device number 33 [ 177.768788][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 177.934868][ T7356] IPv6: Can't replace route, no match found [ 178.420634][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 178.671465][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.453'. [ 179.223132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 179.706612][ T5906] IPVS: starting estimator thread 0... [ 179.802873][ T7388] IPVS: using max 32 ests per chain, 76800 per kthread [ 179.962866][ T5950] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 180.215553][ T5950] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.226020][ T5950] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.276854][ T5950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.287198][ T5950] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.360761][ T5950] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.370309][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.398262][ T5950] usb 4-1: Product: syz [ 180.402618][ T5950] usb 4-1: Manufacturer: syz [ 180.412199][ T5950] cdc_wdm 4-1:1.0: skipping garbage [ 180.417629][ T5950] cdc_wdm 4-1:1.0: skipping garbage [ 180.426042][ T5950] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 180.435744][ T5950] cdc_wdm 4-1:1.0: Unknown control protocol [ 180.622829][ T5906] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 180.672892][ T5950] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 180.748325][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.464'. [ 180.782855][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 180.790924][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.803409][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.829373][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.840731][ T5950] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.842234][ T5906] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.868102][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.872861][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.896704][ T5906] usb 5-1: Product: syz [ 180.908276][ T5906] usb 5-1: Manufacturer: syz [ 180.916185][ T5950] usb 3-1: config 0 descriptor?? [ 180.921396][ T5906] usb 5-1: SerialNumber: syz [ 180.936715][ T5950] pwc: Askey VC010 type 2 USB webcam detected. [ 180.937735][ T5906] usb 5-1: config 0 descriptor?? [ 181.020428][ T5906] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.029887][ T5906] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 181.136701][ T5950] pwc: send_video_command error -71 [ 181.142106][ T5950] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 181.171212][ T5950] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 181.204712][ T5950] usb 3-1: USB disconnect, device number 23 [ 181.361795][ T7414] netlink: 44 bytes leftover after parsing attributes in process `syz.1.468'. [ 181.772860][ T5950] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 181.945200][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.956313][ T5950] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 181.985276][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.034144][ T5950] usb 3-1: config 0 descriptor?? [ 182.072208][ T5950] pwc: Askey VC010 type 2 USB webcam detected. [ 182.507133][ T5950] pwc: recv_control_msg error -32 req 02 val 2b00 [ 182.531246][ T5950] pwc: recv_control_msg error -32 req 02 val 2700 [ 182.543094][ T5906] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 182.549894][ T5950] pwc: recv_control_msg error -32 req 02 val 2c00 [ 182.550236][ T5906] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 182.667008][ T5906] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 182.685137][ T5906] em28xx 5-1:0.0: No AC97 audio processor [ 182.691339][ T5950] pwc: recv_control_msg error -32 req 04 val 1000 [ 182.714017][ T5950] pwc: recv_control_msg error -32 req 04 val 1300 [ 182.723819][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 183.128003][ T5950] pwc: recv_control_msg error -32 req 04 val 1400 [ 183.136652][ T5950] pwc: recv_control_msg error -32 req 02 val 2000 [ 183.143785][ T5950] pwc: recv_control_msg error -32 req 02 val 2100 [ 183.150812][ T5950] pwc: recv_control_msg error -32 req 04 val 1500 [ 183.158422][ T5950] pwc: recv_control_msg error -32 req 02 val 2500 [ 183.256105][ C1] wdm_int_callback: 8 callbacks suppressed [ 183.256130][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 183.256486][ T5906] usb 4-1: USB disconnect, device number 34 [ 183.261972][ C1] wdm_int_callback: 8 callbacks suppressed [ 183.261992][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 183.286458][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 183.302640][ T5890] usb 5-1: USB disconnect, device number 24 [ 183.335988][ T5890] em28xx 5-1:0.0: Disconnecting em28xx [ 183.380094][ T5890] em28xx 5-1:0.0: Freeing device [ 183.712637][ T5950] pwc: recv_control_msg error -71 req 02 val 2600 [ 183.730570][ T5950] pwc: recv_control_msg error -71 req 02 val 2900 [ 183.759103][ T5950] pwc: recv_control_msg error -71 req 02 val 2800 [ 183.778864][ T490] IPVS: stop unused estimator thread 0... [ 183.789851][ T5950] pwc: recv_control_msg error -71 req 04 val 1100 [ 183.801102][ T5950] pwc: recv_control_msg error -71 req 04 val 1200 [ 183.813197][ T5906] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 183.864633][ T5950] pwc: Registered as video103. [ 183.879505][ T5950] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 183.969183][ T5950] usb 3-1: USB disconnect, device number 24 [ 184.022828][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 184.056247][ T5906] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 184.083786][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.100475][ T5906] usb 4-1: Product: syz [ 184.110919][ T5906] usb 4-1: Manufacturer: syz [ 184.155507][ T5906] usb 4-1: SerialNumber: syz [ 184.170547][ T5906] usb 4-1: config 0 descriptor?? [ 184.203178][ T5890] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 184.382325][ T7448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.479'. [ 184.441229][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.447296][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.460684][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 184.489009][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.517059][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.522862][ T5890] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 184.548621][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.653284][ T5906] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 035 [ 184.671977][ T5890] usb 2-1: config 0 descriptor?? [ 184.886529][ T5890] ath6kl: Failed to submit usb control message: -71 [ 184.908681][ T5906] usb 4-1: USB disconnect, device number 35 [ 184.930502][ T5890] ath6kl: unable to send the bmi data to the device: -71 [ 184.995172][ T5890] ath6kl: Unable to send get target info: -71 [ 185.011994][ T5890] ath6kl: Failed to init ath6kl core: -71 [ 185.058399][ T5890] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 185.193000][ T5890] usb 2-1: USB disconnect, device number 26 [ 185.270499][ T7459] netlink: 14 bytes leftover after parsing attributes in process `syz.0.483'. [ 186.870141][ T7506] pimreg: entered allmulticast mode [ 187.838142][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'. [ 188.305043][ T7533] warning: `syz.2.513' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 189.543064][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 190.154647][ T7563] netlink: 'syz.4.524': attribute type 25 has an invalid length. [ 192.009522][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.539'. [ 192.056158][ T7598] syzkaller0: entered promiscuous mode [ 192.061703][ T7598] syzkaller0: entered allmulticast mode [ 192.196754][ T42] IPVS: starting estimator thread 0... [ 192.205028][ T7603] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 192.221539][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 192.283502][ T7611] IPVS: using max 39 ests per chain, 93600 per kthread [ 193.203315][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.222544][ T7634] batadv_slave_0: entered promiscuous mode [ 193.331045][ T5822] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 194.080046][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042647800: rx timeout, send abort [ 194.195169][ T7693] syzkaller0: entered promiscuous mode [ 194.210273][ T7693] syzkaller0: entered allmulticast mode [ 194.232545][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.239123][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.580865][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042645400: rx timeout, send abort [ 194.589855][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042647800: abort rx timeout. Force session deactivation [ 195.089252][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042645400: abort rx timeout. Force session deactivation [ 195.207977][ T7732] syzkaller0: entered promiscuous mode [ 195.233016][ T7732] syzkaller0: entered allmulticast mode [ 195.960381][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.614'. [ 195.993507][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.614'. [ 196.039189][ T7782] TC_ACT_REPEAT abuse ? [ 196.046227][ T7788] syzkaller0: entered promiscuous mode [ 196.051731][ T7788] syzkaller0: entered allmulticast mode [ 196.293394][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 196.299579][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 196.305806][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 196.311834][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 196.314057][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 196.425735][ T7808] syzkaller0: entered promiscuous mode [ 196.431580][ T7808] syzkaller0: entered allmulticast mode [ 196.439068][ T7813] tipc: Enabled bearer , priority 0 [ 196.500225][ T7818] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 196.645537][ T7808] tipc: Resetting bearer [ 196.664266][ T7806] tipc: Resetting bearer [ 196.797998][ T7806] tipc: Disabling bearer [ 196.874464][ T7839] netlink: 164 bytes leftover after parsing attributes in process `syz.3.633'. [ 196.914351][ T7839] netlink: 164 bytes leftover after parsing attributes in process `syz.3.633'. [ 197.079829][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.637'. [ 197.100812][ T7848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.103785][ T7849] netlink: 40 bytes leftover after parsing attributes in process `syz.4.637'. [ 197.285888][ T7863] syzkaller0: entered promiscuous mode [ 197.301658][ T7863] syzkaller0: entered allmulticast mode [ 197.542249][ T7861] team_slave_0: entered promiscuous mode [ 197.548254][ T7861] team_slave_1: entered promiscuous mode [ 197.593435][ T7861] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.503750][ T7927] netlink: 104 bytes leftover after parsing attributes in process `syz.2.663'. [ 198.930990][ T7954] syzkaller0: entered promiscuous mode [ 198.951895][ T7954] syzkaller0: entered allmulticast mode [ 198.977773][ T7955] syzkaller0: entered promiscuous mode [ 198.989826][ T7955] syzkaller0: entered allmulticast mode [ 199.653849][ T7996] tipc: Enabled bearer , priority 0 [ 199.662069][ T7996] syzkaller0: entered allmulticast mode [ 199.737637][ T7996] tipc: Resetting bearer [ 199.784694][ T7991] tipc: Resetting bearer [ 199.863442][ T7991] tipc: Disabling bearer [ 199.933118][ T8000] syzkaller0: entered promiscuous mode [ 199.939235][ T8000] syzkaller0: entered allmulticast mode [ 199.957679][ T8014] syzkaller0: entered promiscuous mode [ 199.993034][ T8014] syzkaller0: entered allmulticast mode [ 201.946913][ T8073] netlink: 'syz.3.713': attribute type 11 has an invalid length. [ 201.973956][ T8073] netlink: 140 bytes leftover after parsing attributes in process `syz.3.713'. [ 202.052220][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.095733][ T8081] batadv_slave_0: entered promiscuous mode [ 202.673109][ T8110] syzkaller0: entered promiscuous mode [ 202.711806][ T8110] syzkaller0: entered allmulticast mode [ 203.176656][ T8125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.199955][ T8128] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 203.283462][ T8138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.291039][ T8138] batadv_slave_0: entered promiscuous mode [ 204.200785][ T8199] tipc: Enabled bearer , priority 0 [ 204.209221][ T8199] syzkaller0: entered promiscuous mode [ 204.221388][ T8199] syzkaller0: entered allmulticast mode [ 204.269928][ T8199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.775'. [ 204.317655][ T8199] tipc: Resetting bearer [ 204.349558][ T8198] tipc: Resetting bearer [ 204.446091][ T8198] tipc: Disabling bearer [ 204.625601][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801dbbc000: rx timeout, send abort [ 204.844992][ T8230] syzkaller0: entered promiscuous mode [ 204.850662][ T8230] syzkaller0: entered allmulticast mode [ 205.125722][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801dbbf800: rx timeout, send abort [ 205.134237][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801dbbc000: abort rx timeout. Force session deactivation [ 205.634049][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801dbbf800: abort rx timeout. Force session deactivation [ 205.652462][ T8276] syzkaller0: entered promiscuous mode [ 205.687484][ T8276] syzkaller0: entered allmulticast mode [ 206.246040][ T8315] netlink: 104 bytes leftover after parsing attributes in process `syz.1.828'. [ 206.380171][ T8321] syzkaller0: entered promiscuous mode [ 206.389809][ T8321] syzkaller0: entered allmulticast mode [ 207.036364][ T8359] batadv_slave_0: entered promiscuous mode [ 207.290203][ T8378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.853'. [ 207.445885][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 208.647497][ T8367] syzkaller0: entered promiscuous mode [ 208.653062][ T8367] syzkaller0: entered allmulticast mode [ 208.957441][ T8419] xt_hashlimit: size too large, truncated to 1048576 [ 209.298205][ T8441] syzkaller0: entered promiscuous mode [ 209.307343][ T8441] syzkaller0: entered allmulticast mode [ 209.685240][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 209.919938][ T8476] syzkaller0: entered promiscuous mode [ 209.946938][ T8476] syzkaller0: entered allmulticast mode [ 210.227817][ T8491] tipc: Enabled bearer , priority 0 [ 210.243924][ T8491] syzkaller0: entered promiscuous mode [ 210.259678][ T8491] syzkaller0: entered allmulticast mode [ 210.290102][ T8491] tipc: Resetting bearer [ 210.309565][ T8489] tipc: Resetting bearer [ 210.344119][ T8489] tipc: Disabling bearer [ 210.649762][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 212.046139][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 212.327764][ T8611] xt_hashlimit: size too large, truncated to 1048576 [ 213.196299][ T8662] tipc: Enabled bearer , priority 0 [ 213.227589][ T8659] syzkaller0: entered promiscuous mode [ 213.233205][ T8659] syzkaller0: entered allmulticast mode [ 213.242616][ T8651] syzkaller0: entered promiscuous mode [ 213.267698][ T8651] syzkaller0: entered allmulticast mode [ 213.357865][ T8651] tipc: Resetting bearer [ 213.389422][ T8650] tipc: Resetting bearer [ 213.453229][ T8650] tipc: Disabling bearer [ 214.487564][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 214.535103][ T8744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1022'. [ 215.744619][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1061'. [ 215.892249][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'. [ 216.100205][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1070'. [ 216.113889][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1070'. [ 216.147415][ T8841] tipc: Enabled bearer , priority 0 [ 216.203313][ T8841] syzkaller0: entered promiscuous mode [ 216.232093][ T8841] syzkaller0: entered allmulticast mode [ 216.295376][ T8840] tipc: Resetting bearer [ 216.349548][ T8840] tipc: Disabling bearer [ 216.374072][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 216.832345][ T8887] tipc: Enabled bearer , priority 0 [ 216.839981][ T8887] syzkaller0: entered promiscuous mode [ 216.845967][ T8887] syzkaller0: entered allmulticast mode [ 216.865033][ T8886] tipc: Resetting bearer [ 216.914099][ T8886] tipc: Disabling bearer [ 216.987667][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 217.520431][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 217.771115][ T8928] syzkaller0: entered promiscuous mode [ 217.789148][ T8928] syzkaller0: entered allmulticast mode [ 218.393660][ T8960] tipc: Enabled bearer , priority 0 [ 218.401168][ T8960] syzkaller0: entered promiscuous mode [ 218.419945][ T8960] syzkaller0: entered allmulticast mode [ 218.429137][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 218.451343][ T8959] tipc: Resetting bearer [ 218.490967][ T8959] tipc: Disabling bearer [ 219.036065][ T8997] netlink: 'syz.1.1144': attribute type 4 has an invalid length. [ 219.370447][ T9011] team_slave_0: entered promiscuous mode [ 219.376236][ T9011] team_slave_1: entered promiscuous mode [ 219.401880][ T9011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.451354][ T9020] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 219.665163][ T9044] IPv6: sit1: Disabled Multicast RS [ 219.701543][ T9050] __nla_validate_parse: 6 callbacks suppressed [ 219.701563][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'. [ 219.723152][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 220.238685][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'. [ 220.545693][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 221.090470][ T9116] syzkaller0: entered promiscuous mode [ 221.096235][ T9116] syzkaller0: entered allmulticast mode [ 221.443026][ T9136] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 221.526083][ T9136] bond1: entered allmulticast mode [ 221.531621][ T9136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.606541][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 221.725082][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 221.731369][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'. [ 222.189854][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1227'. [ 222.401731][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 223.029478][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 223.634524][ T9259] syzkaller0: entered promiscuous mode [ 223.642519][ T9259] syzkaller0: entered allmulticast mode [ 225.138084][ T9318] syzkaller0: entered promiscuous mode [ 225.197903][ T9318] syzkaller0: entered allmulticast mode [ 225.415982][ T9330] __nla_validate_parse: 2 callbacks suppressed [ 225.416001][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 225.677298][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 225.716304][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 226.510031][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 226.600679][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 226.709113][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 226.854194][ T9395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1326'. [ 226.965503][ T9399] tipc: Enabled bearer , priority 0 [ 226.988063][ T9399] syzkaller0: entered promiscuous mode [ 227.004390][ T9399] syzkaller0: entered allmulticast mode [ 227.012646][ T9404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1331'. [ 227.049767][ T9399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1328'. [ 227.078878][ T9399] tipc: Resetting bearer [ 227.111320][ T9397] tipc: Resetting bearer [ 227.137061][ T9397] tipc: Disabling bearer [ 227.201707][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 227.856548][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.864269][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.951373][ T9435] tipc: Resetting bearer [ 228.063671][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.182105][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.212883][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.221889][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.657873][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.665582][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.730393][ T9465] team_slave_0: left promiscuous mode [ 228.751993][ T9465] team_slave_1: left promiscuous mode [ 228.804381][ T9465] tipc: Resetting bearer [ 228.953046][ T9465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.987445][ T9465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.170345][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.190451][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.206405][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.772482][ T9520] syzkaller0: entered promiscuous mode [ 229.778357][ T9520] syzkaller0: entered allmulticast mode [ 231.367536][ T9555] __nla_validate_parse: 10 callbacks suppressed [ 231.367557][ T9555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1395'. [ 231.660031][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 231.722928][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1401'. [ 231.978759][ T9581] syzkaller0: entered promiscuous mode [ 231.984464][ T9581] syzkaller0: entered allmulticast mode [ 232.559599][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032008000: rx timeout, send abort [ 232.713888][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 233.068153][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032008000: abort rx timeout. Force session deactivation [ 233.512120][ T9609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 233.521906][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 233.530985][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1414'. [ 233.574358][ T9610] netlink: 'syz.4.1414': attribute type 4 has an invalid length. [ 234.428837][ T9635] syzkaller0: entered promiscuous mode [ 234.435386][ T9635] syzkaller0: entered allmulticast mode [ 234.864338][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1429'. [ 234.945631][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'. [ 234.955045][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 235.004686][ T9662] netlink: 'syz.1.1429': attribute type 4 has an invalid length. [ 236.289332][ T9675] team_slave_0: entered promiscuous mode [ 236.295100][ T9675] team_slave_1: entered promiscuous mode [ 236.311006][ T9675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 236.553684][ T9699] __nla_validate_parse: 2 callbacks suppressed [ 236.553705][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'. [ 236.930814][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 236.993835][ T9725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.001096][ T9725] IPv6: NLM_F_CREATE should be set when creating new route [ 237.044803][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1463'. [ 237.058436][ T9728] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1462'. [ 237.336122][ T9749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1471'. [ 237.982452][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1477'. [ 238.131158][ T9766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1480'. [ 238.525784][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 238.589335][ T9798] syzkaller0: entered promiscuous mode [ 238.606773][ T9798] syzkaller0: entered allmulticast mode [ 239.110955][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'. [ 239.367596][ T9832] batadv_slave_0: left promiscuous mode [ 239.516656][ T9832] bond1: left allmulticast mode [ 239.699214][ T9841] tipc: Enabled bearer , priority 0 [ 239.720095][ T9841] tipc: Resetting bearer [ 239.737035][ T9840] tipc: Disabling bearer [ 240.397992][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1528'. [ 240.724391][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.731800][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.767892][ T9890] team_slave_0: left promiscuous mode [ 240.773824][ T9890] team_slave_1: left promiscuous mode [ 240.810451][ T9890] tipc: Resetting bearer [ 240.959964][ T9890] batadv_slave_0: left promiscuous mode [ 240.987042][ T9890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.212548][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.252167][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.294869][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.022827][ T5906] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 242.174320][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.188016][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 242.189015][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 242.200820][ T5906] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.220578][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.240396][ T5906] usb 4-1: config 0 descriptor?? [ 242.257924][ T9948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.267728][ T5906] hub 4-1:0.0: USB hub found [ 242.474336][ T5906] hub 4-1:0.0: 1 port detected [ 242.672816][ T5905] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 242.842819][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 242.849906][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.861845][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.871980][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.881868][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.913415][ T5905] usb 3-1: config 0 descriptor?? [ 242.927691][ T5905] hub 3-1:0.0: USB hub found [ 243.126967][ T5905] hub 3-1:0.0: 1 port detected [ 243.536313][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 243.742312][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 243.771802][ T9491] usb 4-1: USB disconnect, device number 36 [ 243.812918][ T5905] hub 3-1:0.0: activate --> -90 [ 243.989161][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 243.998422][ T24] usb 3-1: USB disconnect, device number 25 [ 244.006811][ T5905] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 244.012071][T10028] syzkaller0: entered promiscuous mode [ 244.043303][T10028] syzkaller0: entered allmulticast mode [ 244.053093][ T5906] usb 4-1-port1: config error [ 244.098744][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 244.111551][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 244.121448][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 244.303883][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 244.364688][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 244.478767][T10053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1608'. [ 244.577100][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'. [ 244.818592][T10063] syzkaller0: entered promiscuous mode [ 244.835621][T10063] syzkaller0: entered allmulticast mode [ 245.635528][T10087] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 245.912831][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 246.068224][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 246.102770][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.134771][ T24] usb 3-1: Product: syz [ 246.142385][ T24] usb 3-1: Manufacturer: syz [ 246.160874][ T24] usb 3-1: SerialNumber: syz [ 246.597879][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 246.628072][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 246.707733][T10123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.739196][T10123] bond1: entered promiscuous mode [ 246.752938][T10123] bond1: entered allmulticast mode [ 246.770028][T10123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.782602][T10123] team0: Port device bond1 added [ 247.860523][T10157] __nla_validate_parse: 9 callbacks suppressed [ 247.860545][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 247.876578][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 247.903184][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 247.928336][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 247.954746][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 247.985100][ T24] usb 3-1: USB disconnect, device number 26 [ 248.336802][T10178] tipc: Enabling of bearer rejected, failed to enable media [ 248.350894][T10177] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 248.436895][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1668'. [ 248.577808][T10195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1674'. [ 248.589381][T10195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1674'. [ 248.614873][T10195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1674'. [ 248.953495][T10207] syzkaller0: entered promiscuous mode [ 248.960837][T10207] syzkaller0: entered allmulticast mode [ 248.984432][T10213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 249.001873][T10211] tipc: Enabling of bearer rejected, failed to enable media [ 249.063300][T10213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.735481][T10216] bond2: entered promiscuous mode [ 250.740657][T10216] bond2: entered allmulticast mode [ 250.748104][T10216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.758193][T10216] team0: Port device bond2 added [ 250.929269][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1694'. [ 251.096915][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1699'. [ 251.134195][T10257] netlink: 'syz.0.1699': attribute type 4 has an invalid length. [ 251.396588][T10260] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 251.427308][T10265] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 251.673650][ T5877] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 251.722612][T10276] mmap: syz.2.1696 (10276) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 251.960560][ T5905] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 251.972904][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 251.991682][ T5877] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 252.012527][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.031305][ T5877] usb 1-1: Product: syz [ 252.042974][ T5877] usb 1-1: Manufacturer: syz [ 252.052834][ T5877] usb 1-1: SerialNumber: syz [ 252.067901][T10285] tipc: Enabled bearer , priority 0 [ 252.068806][ T5877] usb 1-1: config 0 descriptor?? [ 252.076308][T10285] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1709'. [ 252.102330][T10285] tipc: Resetting bearer [ 252.108220][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 252.131569][T10284] tipc: Disabling bearer [ 252.137690][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 252.151846][ T5905] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 252.160580][ T5905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.174968][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.190995][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.216685][ T5905] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.250821][ T5905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.263190][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.278123][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 252.295441][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.311380][ T5906] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 252.330825][ T5877] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.332770][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.371124][ T5906] usb 2-1: config 0 descriptor?? [ 252.386973][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 252.480765][ T5905] usb 4-1: usb_control_msg returned -32 [ 252.487995][ T5905] usbtmc 4-1:16.0: can't read capabilities [ 252.593235][ T5906] pwc: send_video_command error -71 [ 252.599081][ T5906] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 252.606848][ T5906] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 252.619666][ T5906] usb 2-1: USB disconnect, device number 27 [ 253.315950][T10291] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.323687][T10291] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 253.335838][T10291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.343203][T10291] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 253.352065][T10291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.358129][T10291] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 253.365888][T10291] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.371894][T10291] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 253.381665][T10291] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.387954][T10291] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 253.644063][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 253.759131][ T5877] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 253.811203][ T5877] usb 1-1: USB disconnect, device number 28 [ 253.824175][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.873084][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 253.882189][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.924644][T10310] tipc: Enabled bearer , priority 0 [ 253.932023][ T24] usb 2-1: config 0 descriptor?? [ 253.933329][T10310] __nla_validate_parse: 1 callbacks suppressed [ 253.933345][T10310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1720'. [ 253.960715][T10310] tipc: Resetting bearer [ 253.970534][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 253.998461][T10309] tipc: Disabling bearer [ 254.381578][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 254.396931][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 254.426489][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 254.451825][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 254.640438][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 254.650497][ T5877] usb 4-1: USB disconnect, device number 37 [ 254.670931][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 254.677979][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 254.687279][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 254.695331][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 254.702442][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 254.711890][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 254.721468][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 254.728550][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 254.735654][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 254.743639][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 254.750724][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 254.762246][ T24] pwc: Registered as video103. [ 254.782588][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 254.897324][ T24] usb 2-1: USB disconnect, device number 28 [ 255.391869][T10341] tipc: Enabled bearer , priority 0 [ 255.408535][T10341] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1731'. [ 255.418144][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 255.424324][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 255.430551][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 255.436704][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 255.458728][T10341] tipc: Resetting bearer [ 255.562278][T10340] tipc: Disabling bearer [ 255.659756][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.672795][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.696329][T10349] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1735'. [ 255.782812][ T5906] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 255.942951][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 255.950114][ T5906] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 255.967122][ T5906] usb 5-1: config 0 has no interface number 0 [ 255.976107][ T5906] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.988813][ T5906] usb 5-1: config 0 interface 85 has no altsetting 0 [ 255.997981][ T5906] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 256.022777][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.051347][ T5906] usb 5-1: Product: syz [ 256.055712][ T5906] usb 5-1: Manufacturer: syz [ 256.060322][ T5906] usb 5-1: SerialNumber: syz [ 256.109688][ T5906] usb 5-1: config 0 descriptor?? [ 256.203410][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 256.234218][T10362] syzkaller0: entered promiscuous mode [ 256.239894][T10362] syzkaller0: entered allmulticast mode [ 256.353383][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 256.369887][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 256.382772][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.401850][ T24] usb 4-1: Product: syz [ 256.406400][ T24] usb 4-1: Manufacturer: syz [ 256.411106][ T24] usb 4-1: SerialNumber: syz [ 256.419565][ T24] usb 4-1: config 0 descriptor?? [ 256.652689][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 256.694590][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 256.740458][ T5906] appletouch 5-1:0.85: Geyser mode initialized. [ 256.756971][ T5906] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input14 [ 256.952966][ T9489] usb 5-1: USB disconnect, device number 25 [ 256.981924][ T9489] appletouch 5-1:0.85: input: appletouch disconnected [ 257.482391][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 257.493166][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 257.493181][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 257.493209][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 257.499194][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 257.512644][ T24] usb 4-1: USB disconnect, device number 38 [ 258.063683][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 259.242185][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 259.686043][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 259.694540][T10456] syzkaller0: entered promiscuous mode [ 259.705473][T10456] syzkaller0: entered allmulticast mode [ 260.163981][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'. [ 260.389744][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1800'. [ 260.902854][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 261.072842][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 261.080184][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.091581][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.100940][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.123510][ T24] usb 2-1: config 0 descriptor?? [ 261.341936][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 261.596831][ T24] usb 2-1: USB disconnect, device number 29 [ 261.903668][T10520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1808'. [ 261.966529][T10523] netlink: 'syz.4.1808': attribute type 4 has an invalid length. [ 262.076077][T10533] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1814'. [ 262.195919][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 262.390699][T10546] syzkaller0: entered promiscuous mode [ 262.396563][T10546] syzkaller0: entered allmulticast mode [ 263.482803][ T5905] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 263.666768][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 263.678116][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.688461][ T5905] usb 5-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 263.698088][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.723414][ T5905] usb 5-1: config 0 descriptor?? [ 264.165726][ T5905] hid_parser_main: 4007 callbacks suppressed [ 264.165749][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.184243][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.191246][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.198672][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.206025][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.213520][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.220610][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.228212][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.235153][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.242142][ T5905] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 264.259176][ T5905] wacom 0003:056A:5012.0006: reserved main item tag 0xd [ 264.269465][ T5905] wacom 0003:056A:5012.0006: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 264.307026][T10553] syzkaller0: entered promiscuous mode [ 264.312825][T10553] syzkaller0: entered allmulticast mode [ 264.360326][ T9489] usb 5-1: USB disconnect, device number 26 [ 264.393389][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 264.564559][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.576671][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.603563][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 264.612639][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.637185][ T24] usb 4-1: config 0 descriptor?? [ 264.782835][ T9489] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 264.953106][ T9489] usb 3-1: Using ep0 maxpacket: 16 [ 264.961208][ T9489] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.972967][ T9489] usb 3-1: config 0 interface 0 has no altsetting 0 [ 264.983524][ T9489] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 264.992943][ T9489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.001286][ T9489] usb 3-1: Product: syz [ 265.006004][ T9489] usb 3-1: Manufacturer: syz [ 265.011992][ T9489] usb 3-1: SerialNumber: syz [ 265.027758][ T9489] usb 3-1: config 0 descriptor?? [ 265.042873][ T5905] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 265.051260][T10600] syzkaller0: entered promiscuous mode [ 265.057335][T10600] syzkaller0: entered allmulticast mode [ 265.058255][ T24] arvo 0003:1E7D:30D4.0007: global environment stack underflow [ 265.075721][ T24] arvo 0003:1E7D:30D4.0007: item 0 1 1 11 parsing failed [ 265.084461][ T24] arvo 0003:1E7D:30D4.0007: parse failed [ 265.090283][ T24] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -22 [ 265.225556][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 265.239985][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.251385][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 265.260283][ T5905] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.270006][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.291070][ T5905] usb 1-1: config 0 descriptor?? [ 265.292096][ T9489] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 265.321733][ T24] usb 4-1: USB disconnect, device number 39 [ 265.380317][ T9489] imon:send_packet: packet tx failed (-71) [ 265.404496][ T9489] imon 3-1:0.0: panel buttons/knobs setup failed [ 265.497217][ T9489] rc_core: IR keymap rc-imon-pad not found [ 265.505146][ T9489] Registered IR keymap rc-empty [ 265.510116][ T9489] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 265.520793][ T9489] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 265.535187][ T9489] imon:send_packet: packet tx failed (-71) [ 265.548584][ T5905] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 265.553150][ T9489] imon 3-1:0.0: remote input dev register failed [ 265.565886][ T9489] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 265.633874][ T9489] imon 3-1:0.0: unable to initialize intf0, err 0 [ 265.640468][ T9489] imon:imon_probe: failed to initialize context! [ 265.647149][ T9489] imon 3-1:0.0: unable to register, err -19 [ 265.667748][ T9489] usb 3-1: USB disconnect, device number 27 [ 265.986881][ T9489] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 266.000860][ T5877] usb 1-1: USB disconnect, device number 29 [ 266.143880][ T9489] usb 3-1: Using ep0 maxpacket: 16 [ 266.158403][ T9489] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.170014][ T9489] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.192222][ T9489] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 266.204518][ T9489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.212646][ T9489] usb 3-1: Product: syz [ 266.217071][ T9489] usb 3-1: Manufacturer: syz [ 266.221712][ T9489] usb 3-1: SerialNumber: syz [ 266.235024][ T9489] usb 3-1: config 0 descriptor?? [ 266.506494][ T9489] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 266.773471][ T9489] rc_core: IR keymap rc-imon-pad not found [ 266.779463][ T9489] Registered IR keymap rc-empty [ 266.784625][ T9489] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 266.795133][ T9489] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 266.896856][ T5877] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 266.931364][ T9489] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 266.957581][ T9489] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 266.979167][ T9489] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:28> initialized [ 267.056592][ T5877] usb 1-1: config 8 has an invalid interface number: 33 but max is 0 [ 267.069988][ T5877] usb 1-1: config 8 has no interface number 0 [ 267.083000][ T5877] usb 1-1: config 8 interface 33 has no altsetting 0 [ 267.104391][ T5877] usb 1-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 267.114602][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.123035][ T5877] usb 1-1: Product: syz [ 267.127247][ T5877] usb 1-1: Manufacturer: syz [ 267.132093][ T5877] usb 1-1: SerialNumber: syz [ 267.351824][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 267.352247][ T5906] usb 3-1: USB disconnect, device number 28 [ 267.623633][T10632] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1852'. [ 267.749982][ T5877] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 267.775686][ T5877] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 267.813709][ T5877] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 267.822314][ T5877] usb 1-1: media controller created [ 267.846480][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.908435][ T5877] DVB: Unable to find symbol dib7000p_attach() [ 267.919431][ T5877] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 268.011556][T10647] syzkaller0: entered promiscuous mode [ 268.017266][T10647] syzkaller0: entered allmulticast mode [ 268.052857][ T5877] rc_core: IR keymap rc-dib0700-rc5 not found [ 268.063411][ T5877] Registered IR keymap rc-empty [ 268.069485][ T5877] dvb-usb: could not initialize remote control. [ 268.091898][ T5877] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 268.141556][ T5877] usb 1-1: USB disconnect, device number 30 [ 268.166292][ T5877] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 268.281076][T10663] netlink: 'syz.2.1864': attribute type 1 has an invalid length. [ 268.423950][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'. [ 269.611136][T10663] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 269.932808][ T9491] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 269.974630][T10702] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 270.144113][ T9491] usb 4-1: Using ep0 maxpacket: 8 [ 270.167553][ T9491] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 270.186921][ T9491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.217786][ T9491] usb 4-1: Product: syz [ 270.230885][ T9491] usb 4-1: Manufacturer: syz [ 270.239938][ T9491] usb 4-1: SerialNumber: syz [ 270.483389][ T9491] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 270.499057][ T9491] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 270.597376][ T9491] usb 4-1: USB disconnect, device number 40 [ 270.659038][ T6270] udevd[6270]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.782869][ T5905] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 270.892856][ T5906] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 270.954068][ T5905] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 270.963344][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.973548][ T5905] usb 1-1: config 0 descriptor?? [ 270.987447][ T5905] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 271.022952][ T9491] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 271.053546][ T5906] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 271.064235][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.073254][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.086377][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.094602][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.103585][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.114536][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.122100][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.131162][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.142116][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.149846][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.158840][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.169747][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.172815][ T9491] usb 5-1: Using ep0 maxpacket: 16 [ 271.177918][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.184189][ T9491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.196094][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.202235][ T9491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.212909][ T5905] gp8psk: usb in 128 operation failed. [ 271.227863][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.235321][ T9491] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 271.235961][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.248958][ T9491] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 271.257510][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.272258][ T9491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.277663][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.293642][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.295899][ T9489] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 271.303263][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.322753][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.336128][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.360733][ T9491] usb 5-1: config 0 descriptor?? [ 271.365824][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.402939][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.412266][ T5906] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 271.422287][ T5906] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 271.439544][ T5906] usb 3-1: Product: syz [ 271.445081][ T5906] usb 3-1: Manufacturer: syz [ 271.449849][ T5906] usb 3-1: SerialNumber: syz [ 271.458667][ T5905] gp8psk: usb in 146 operation failed. [ 271.465511][ T5905] gp8psk: failed to get FW version [ 271.471552][ T5905] gp8psk: usb in 149 operation failed. [ 271.473019][ T9489] usb 4-1: Using ep0 maxpacket: 32 [ 271.483401][ T5906] usb 3-1: config 0 descriptor?? [ 271.488542][ T5905] gp8psk: failed to get FPGA version [ 271.495027][ T9489] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 271.504429][ T5906] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 271.513312][ T9489] usb 4-1: config 0 has no interface number 0 [ 271.519481][ T9489] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.556334][ T9489] usb 4-1: config 0 interface 85 has no altsetting 0 [ 271.566197][ T9489] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 271.581470][ T9489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.590614][ T9489] usb 4-1: Product: syz [ 271.594977][ T9489] usb 4-1: Manufacturer: syz [ 271.599766][ T9489] usb 4-1: SerialNumber: syz [ 271.607816][ T9489] usb 4-1: config 0 descriptor?? [ 271.703242][ T5905] gp8psk: usb out operation failed. [ 271.709443][ T5905] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 271.727713][ T5905] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 271.735515][ T5877] usb 3-1: USB disconnect, device number 29 [ 271.765853][ T5877] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 271.771045][ T5905] usb 1-1: USB disconnect, device number 31 [ 271.818646][ T9491] hid_parser_main: 443 callbacks suppressed [ 271.818670][ T9491] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 271.841869][ T9491] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 271.850244][ T9491] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 271.859733][ T9491] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 271.866799][ T9491] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 271.886068][ T9491] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 271.948925][ T9491] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 271.957397][ T9491] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 272.027189][ T5876] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 272.041706][ T9491] usb 5-1: USB disconnect, device number 27 [ 272.051727][ T5876] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.065776][ T5876] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.079137][ T5876] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 272.152852][ T5877] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 272.219497][ T9489] appletouch 4-1:0.85: Geyser mode initialized. [ 272.228148][ T9489] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input23 [ 272.304103][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 272.318303][ T5877] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 272.343099][ T5877] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 272.352370][ T5877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 272.371176][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.381500][ T5877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.391750][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.405089][ T5877] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 272.414427][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.435430][ T5877] usb 2-1: config 0 descriptor?? [ 272.450526][ T5905] usb 4-1: USB disconnect, device number 41 [ 272.486587][ T5905] appletouch 4-1:0.85: input: appletouch disconnected [ 272.651690][ T5877] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 272.672784][ T5906] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 272.736929][ T5830] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 272.855497][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 272.874529][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 272.881762][ T5877] usb 2-1: USB disconnect, device number 30 [ 272.898526][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.908237][ T5877] usblp0: removed [ 272.916452][ T5906] usb 1-1: Product: syz [ 272.920653][ T5906] usb 1-1: Manufacturer: syz [ 272.931213][ T5906] usb 1-1: SerialNumber: syz [ 272.950666][ T5906] usb 1-1: config 0 descriptor?? [ 273.163087][ T5906] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 274.042858][ T5905] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 274.226180][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.236686][ T5905] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.247348][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.258668][ T5905] usb 2-1: config 0 descriptor?? [ 274.269124][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 274.386890][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 274.394645][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 274.402415][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 274.410775][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 274.418347][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 274.425988][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 274.442622][ T5906] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 274.460343][ T5906] usb 1-1: USB disconnect, device number 32 [ 274.473905][ T5905] pwc: send_video_command error -71 [ 274.480211][ T5905] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 274.488057][ T5905] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 274.507427][ T5905] usb 2-1: USB disconnect, device number 31 [ 274.803935][T10823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.874204][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 274.966889][ T9489] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 274.983112][ T5905] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 275.138384][ T9489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.156220][ T9489] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 275.175421][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.182964][ T9489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.198263][ T5905] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 275.214277][ T9489] usb 5-1: config 0 descriptor?? [ 275.225718][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.262624][ T5905] usb 2-1: config 0 descriptor?? [ 275.280906][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 275.631833][ T9489] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 275.657226][ T9489] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input25 [ 275.680932][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 275.702822][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 275.713807][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 275.721755][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 275.733602][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 275.747742][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 275.759442][ T5905] pwc: recv_control_msg error -32 req 02 val 2000 [ 275.782552][ T9489] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 275.922970][ C1] keytouch 0003:0926:3333.0009: Event data for report 0 was too short (8 vs 1) [ 275.973297][ T5905] pwc: recv_control_msg error -32 req 04 val 1500 [ 275.980690][ T5905] pwc: recv_control_msg error -32 req 02 val 2500 [ 276.137583][ T9491] usb 5-1: USB disconnect, device number 28 [ 276.162458][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 276.192181][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 276.216465][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 276.225393][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 276.232504][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 276.247342][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 276.268635][ T5905] pwc: Registered as video103. [ 276.297003][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 276.332933][ T5905] usb 2-1: USB disconnect, device number 32 [ 276.421256][T10887] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 277.059952][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 277.152793][ T9491] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 277.301354][T10936] macvtap0: entered promiscuous mode [ 277.307733][T10936] macvtap0: entered allmulticast mode [ 277.313335][T10936] veth0_macvtap: entered allmulticast mode [ 277.321285][ T9491] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 277.331119][ T9491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.370907][ T9491] usb 2-1: config 0 descriptor?? [ 277.395221][ T9491] cp210x 2-1:0.0: cp210x converter detected [ 277.714666][T10957] syzkaller0: entered promiscuous mode [ 277.720289][T10957] syzkaller0: entered allmulticast mode [ 277.783167][ T9489] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 277.952510][ T9489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.001461][ T9489] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 278.052889][ T9491] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 278.072788][ T9489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.101205][ T9491] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 278.149991][ T9489] usb 1-1: config 0 descriptor?? [ 278.201409][ T9491] usb 2-1: cp210x converter now attached to ttyUSB0 [ 278.247652][ T9491] usb 2-1: USB disconnect, device number 33 [ 278.268129][ T9491] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 278.280852][ T9491] cp210x 2-1:0.0: device disconnected [ 278.607480][ T9489] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 278.658608][ T9489] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input27 [ 278.808309][ T9489] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 278.866627][ T9489] usb 1-1: USB disconnect, device number 33 [ 278.968987][T11004] fido_id[11004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 279.535254][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 280.336927][T11027] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1997'. [ 280.351824][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 280.398241][T11034] netlink: 'syz.4.2000': attribute type 8 has an invalid length. [ 280.428598][T11029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.432811][ T9489] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 280.442854][T11034] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2000'. [ 280.442941][T11034] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2000'. [ 280.602860][ T9489] usb 1-1: Using ep0 maxpacket: 8 [ 280.620535][ T9489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.641634][ T9489] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 280.650925][ T9489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.670346][ T9489] usb 1-1: config 0 descriptor?? [ 280.754575][T11046] syzkaller0: entered promiscuous mode [ 280.800602][T11046] syzkaller0: entered allmulticast mode [ 280.884935][ T9489] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 282.261098][T11074] netlink: 'syz.2.2016': attribute type 5 has an invalid length. [ 282.271225][T11074] netlink: 'syz.2.2016': attribute type 5 has an invalid length. [ 282.615494][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2024'. [ 282.959292][T11111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.053160][T11119] bond2: left promiscuous mode [ 283.071320][T11119] bond2: left allmulticast mode [ 283.200177][T11125] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.204105][ T9489] usb 1-1: USB disconnect, device number 34 [ 283.361748][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 283.822991][ T9489] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 283.992779][ T9489] usb 4-1: Using ep0 maxpacket: 16 [ 284.015889][ T9489] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 284.032870][ T9489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.051044][ T9489] usb 4-1: Product: syz [ 284.055424][ T9489] usb 4-1: Manufacturer: syz [ 284.060211][ T9489] usb 4-1: SerialNumber: syz [ 284.076520][ T9489] usb 4-1: config 0 descriptor?? [ 284.094684][ T9489] asix 4-1:0.0: probe with driver asix failed with error -22 [ 284.108119][ T5830] Bluetooth: hci1: Malformed HCI Event [ 284.290980][ T9489] usb 4-1: USB disconnect, device number 42 [ 284.428699][T11178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.568463][T11189] batadv_slave_0: left promiscuous mode [ 284.605418][T11189] bond1: left promiscuous mode [ 284.610250][T11189] bond1: left allmulticast mode [ 284.734958][ T9489] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 284.859350][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 284.892995][ T9489] usb 4-1: Using ep0 maxpacket: 16 [ 284.901487][ T9489] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 284.910897][ T9489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.919210][ T9489] usb 4-1: Product: syz [ 284.923667][ T9489] usb 4-1: Manufacturer: syz [ 284.928532][ T9489] usb 4-1: SerialNumber: syz [ 284.936335][ T9489] usb 4-1: config 0 descriptor?? [ 284.944879][ T9489] asix 4-1:0.0: probe with driver asix failed with error -22 [ 285.125636][ T29] audit: type=1326 audit(1774494883.853:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 285.152524][ T9489] usb 4-1: USB disconnect, device number 43 [ 285.160702][ T29] audit: type=1326 audit(1774494883.853:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 285.186811][ T29] audit: type=1326 audit(1774494883.853:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 285.225184][ T29] audit: type=1326 audit(1774494883.853:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 285.249062][ T29] audit: type=1326 audit(1774494883.853:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 285.272529][ T29] audit: type=1326 audit(1774494883.853:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 285.297142][ T29] audit: type=1326 audit(1774494883.853:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 285.320237][ T29] audit: type=1326 audit(1774494883.853:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 285.343677][ T29] audit: type=1326 audit(1774494883.853:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 285.366824][ T29] audit: type=1326 audit(1774494883.853:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.1.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb19519c799 code=0x7ffc0000 [ 286.172844][ T5830] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 286.229751][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2082'. [ 286.448017][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 286.498037][T11243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2085'. [ 286.593829][T11243] vlan2: entered allmulticast mode [ 286.599313][T11243] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 286.676545][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 286.721432][T11249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.793654][T11249] bond2: entered promiscuous mode [ 286.798817][T11249] bond2: entered allmulticast mode [ 286.834782][T11249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.866464][T11249] team0: Port device bond2 added [ 287.118930][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2097'. [ 287.193787][T11282] pim6reg1: entered promiscuous mode [ 287.199423][T11282] pim6reg1: entered allmulticast mode [ 288.068712][T11335] vlan2: left allmulticast mode [ 288.076939][T11335] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 288.883033][ T9489] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 288.923282][ T9476] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 289.052918][ T9489] usb 1-1: Using ep0 maxpacket: 8 [ 289.073098][ T9476] usb 3-1: device descriptor read/64, error -71 [ 289.073932][ T9489] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 289.111256][ T9489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.125282][ T9489] usb 1-1: Product: syz [ 289.130192][ T9489] usb 1-1: Manufacturer: syz [ 289.136554][ T9489] usb 1-1: SerialNumber: syz [ 289.178691][T11396] ªªªªªª: renamed from vlan0 [ 289.190441][ T9489] usb 1-1: config 0 descriptor?? [ 289.312910][ T9476] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 289.417813][ T9489] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 289.493114][ T9476] usb 3-1: device descriptor read/64, error -71 [ 289.613202][ T9476] usb usb3-port1: attempt power cycle [ 289.972847][ T9476] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 289.993787][ T9476] usb 3-1: device descriptor read/8, error -71 [ 290.232794][ T9476] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 290.254173][ T9476] usb 3-1: device descriptor read/8, error -71 [ 290.363705][ T9476] usb usb3-port1: unable to enumerate USB device [ 290.838182][ T9489] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 290.856217][ T9489] usb 1-1: USB disconnect, device number 35 [ 291.601745][T11467] tipc: Enabling of bearer rejected, failed to enable media [ 291.985253][ T5830] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 292.512777][ T5876] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 292.712440][ T5876] usb 5-1: device descriptor read/64, error -71 [ 292.960724][ T5876] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 293.044354][ T5830] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 293.106465][ T5876] usb 5-1: device descriptor read/64, error -71 [ 293.223198][ T5876] usb usb5-port1: attempt power cycle [ 293.242963][ T9491] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 293.385825][T11534] syzkaller0: entered promiscuous mode [ 293.391332][T11534] syzkaller0: entered allmulticast mode [ 293.404974][ T9491] usb 1-1: unable to get BOS descriptor or descriptor too short [ 293.413585][ T9491] usb 1-1: not running at top speed; connect to a high speed hub [ 293.418332][T11537] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 293.428513][ T9491] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.462864][ T9491] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 293.495320][ T9491] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 293.517262][ T9491] usb 1-1: config 1 interface 2 has no altsetting 0 [ 293.534368][ T9491] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 293.551649][ T9491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.560747][ T9491] usb 1-1: Product: syz [ 293.565954][ T5876] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 293.574204][ T9491] usb 1-1: Manufacturer: syz [ 293.579043][ T9491] usb 1-1: SerialNumber: syz [ 293.594360][ T5876] usb 5-1: device descriptor read/8, error -71 [ 293.666679][T11547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2193'. [ 293.782835][ T9489] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 293.824939][ T9491] usb 1-1: selecting invalid altsetting 0 [ 293.830761][ T9491] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 293.841617][ T5876] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 293.852288][ T9491] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 293.861962][ T9491] usb 1-1: selecting invalid altsetting 0 [ 293.869001][ T9491] usb 1-1: 2:1: cannot set freq 13115191 to ep 0x82 [ 293.876035][ T9491] usb 1-1: selecting invalid altsetting 0 [ 293.883464][ T5876] usb 5-1: device descriptor read/8, error -71 [ 293.905336][T11554] syzkaller0: entered promiscuous mode [ 293.912039][T11554] syzkaller0: entered allmulticast mode [ 293.934779][ T9489] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.953067][ T9489] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 293.983024][ T9491] usb 1-1: USB disconnect, device number 36 [ 293.991497][ T9489] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.007563][ T5876] usb usb5-port1: unable to enumerate USB device [ 294.019441][ T9489] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.034589][ T9489] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.053168][ T9489] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.066117][ T9489] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.075821][ T9489] usb 3-1: Product: syz [ 294.080014][ T9489] usb 3-1: Manufacturer: syz [ 294.096793][ T7235] udevd[7235]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.108477][ T9489] cdc_wdm 3-1:1.0: skipping garbage [ 294.124142][ T9489] cdc_wdm 3-1:1.0: skipping garbage [ 294.131066][ T9489] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 294.144703][ T9489] cdc_wdm 3-1:1.0: Unknown control protocol [ 294.378071][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2200'. [ 295.479098][T11564] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 295.552075][T11575] syzkaller0: entered promiscuous mode [ 295.594138][ T9489] usb 3-1: USB disconnect, device number 34 [ 295.612985][T11575] syzkaller0: entered allmulticast mode [ 295.704264][T11582] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2206'. [ 295.862796][ T5905] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 296.003267][T11585] delete_channel: no stack [ 296.054722][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 296.064348][ T5830] Bluetooth: hci1: Injecting HCI hardware error event [ 296.073142][ T5830] Bluetooth: hci1: hardware error 0x00 [ 296.087936][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.102814][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.114574][T11598] syzkaller0: entered promiscuous mode [ 296.120357][T11598] syzkaller0: entered allmulticast mode [ 296.134676][ T5905] usb 4-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 296.144764][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 296.156233][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.175127][ T5905] usb 4-1: config 0 descriptor?? [ 296.187826][T11601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.212857][ T5906] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 296.376669][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 296.406737][ T5906] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 296.422135][ T5906] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 296.431243][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.441596][ T5906] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 296.450908][ T5906] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 296.460152][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.483036][ T5906] usb 3-1: config 0 descriptor?? [ 296.635986][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.643111][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.650247][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.657493][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.665053][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.671974][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.680238][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.687343][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.696517][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.703629][ T5905] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 296.724950][ T5905] usb 3-1: USB disconnect, device number 35 [ 296.832481][ T9489] usb 4-1: USB disconnect, device number 44 [ 297.104555][ T5824] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 297.121798][ T5824] Bluetooth: hci4: Injecting HCI hardware error event [ 297.137122][ T5824] Bluetooth: hci4: hardware error 0x00 [ 298.132823][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 298.298798][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'. [ 298.346175][T11640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.521930][ T9489] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 298.659223][T11649] syzkaller0: entered promiscuous mode [ 298.664821][T11649] syzkaller0: entered allmulticast mode [ 298.794655][ T9489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.823726][ T9489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.843878][ T9489] usb 3-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 298.864037][ T9489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.894086][ T9489] usb 3-1: config 0 descriptor?? [ 299.223153][ T5824] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 299.338672][ T9489] usbhid 3-1:0.0: can't add hid device: -71 [ 299.350545][ T9489] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 299.361151][ T9489] usb 3-1: USB disconnect, device number 36 [ 299.941873][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2241'. [ 300.197494][T11683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2242'. [ 300.917720][T11676] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 301.138197][T11700] fuse: Bad value for 'fd' [ 301.254001][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2253'. [ 301.361148][T11713] pim6reg1: entered promiscuous mode [ 301.372799][ T5905] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 301.380498][T11713] pim6reg1: entered allmulticast mode [ 301.445611][T11715] syzkaller0: entered promiscuous mode [ 301.451308][T11715] syzkaller0: entered allmulticast mode [ 301.544417][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.582982][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.595280][ T5905] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 301.609116][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 301.618105][ T5905] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 301.618132][ T5905] usb 3-1: Manufacturer: syz [ 301.624726][ T5905] usb 3-1: config 0 descriptor?? [ 301.756993][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 301.774258][T11724] kvm: pic: single mode not supported [ 301.774461][T11724] kvm: pic: level sensitive irq not supported [ 302.441989][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2265'. [ 302.481148][ T5905] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input28 [ 302.569537][ T5905] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input29 [ 302.604827][ T5905] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input30 [ 302.641989][ T5905] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input31 [ 302.678421][ T5905] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 302.702579][ T5905] usb 3-1: USB disconnect, device number 37 [ 302.897205][T11740] fido_id[11740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 304.064082][T11760] pim6reg1: entered promiscuous mode [ 304.072813][T11760] pim6reg1: entered allmulticast mode [ 304.172913][ T5905] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 304.335096][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.350548][ T5905] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.362214][ T5905] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 304.372052][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.385937][ T5905] usb 2-1: config 0 descriptor?? [ 304.482848][ T5906] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 304.636306][ T5906] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 304.645852][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.654244][ T5906] usb 5-1: Product: syz [ 304.658612][ T5906] usb 5-1: Manufacturer: syz [ 304.663466][ T5906] usb 5-1: SerialNumber: syz [ 304.685852][ T5906] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 304.711670][ T5905] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.807080][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.817660][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.907202][ T5906] usb 2-1: USB disconnect, device number 34 [ 304.919053][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.934462][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.956137][ T9491] usb 5-1: USB disconnect, device number 33 [ 305.069243][T11787] syzkaller0: entered promiscuous mode [ 305.074848][T11787] syzkaller0: entered allmulticast mode [ 305.499269][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'. [ 305.798955][ T5876] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 305.931293][ T5905] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 305.946064][ T5905] ath9k_htc: Failed to initialize the device [ 305.972068][ T9491] usb 5-1: ath9k_htc: USB layer deinitialized [ 306.019335][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.030159][ T5876] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 306.043480][ T5876] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 306.055161][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 306.063394][ T5876] usb 3-1: Product: syz [ 306.067683][ T5876] usb 3-1: SerialNumber: syz [ 306.075643][ T5876] usb 3-1: config 0 descriptor?? [ 306.304841][T11791] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2283'. [ 306.375536][ T9491] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 306.555876][ T9491] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 306.565723][ T9491] usb 5-1: config 5 has no interface number 0 [ 306.571914][ T9491] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 306.584165][ T9491] usb 5-1: config 5 interface 168 has no altsetting 0 [ 306.593691][ T9491] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=fc.58 [ 306.603184][ T9491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.611228][ T9491] usb 5-1: Product: syz [ 306.615688][ T9491] usb 5-1: Manufacturer: syz [ 306.620387][ T9491] usb 5-1: SerialNumber: syz [ 307.225258][T11803] ALSA: mixer_oss: invalid OSS volume 'w' [ 307.290255][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 307.324986][T11810] macvtap1: entered promiscuous mode [ 307.335517][T11810] erspan0: entered promiscuous mode [ 307.345623][T11810] macvtap1: entered allmulticast mode [ 307.353601][T11810] erspan0: entered allmulticast mode [ 307.382399][T11811] erspan0: left allmulticast mode [ 307.396559][T11811] erspan0: left promiscuous mode [ 307.708463][ T9491] usb 5-1: USB disconnect, device number 34 [ 308.083597][ T5905] usb 3-1: USB disconnect, device number 38 [ 308.309223][T11836] syzkaller0: entered promiscuous mode [ 308.320817][T11836] syzkaller0: entered allmulticast mode [ 308.812802][ T5876] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 309.044214][ T5876] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 309.062782][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.077091][ T5876] usb 2-1: Product: syz [ 309.081422][ T5876] usb 2-1: Manufacturer: syz [ 309.086596][ T5876] usb 2-1: SerialNumber: syz [ 309.099918][ T5876] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 309.120215][ T9491] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 309.339241][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.350230][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.374714][ T5876] usb 2-1: USB disconnect, device number 35 [ 310.206774][T11859] syzkaller1: entered promiscuous mode [ 310.212283][T11859] syzkaller1: entered allmulticast mode [ 310.225118][ T9491] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 310.247599][ T9491] ath9k_htc: Failed to initialize the device [ 310.276910][ T5876] usb 2-1: ath9k_htc: USB layer deinitialized [ 310.355074][T11866] syzkaller0: entered promiscuous mode [ 310.360802][T11866] syzkaller0: entered allmulticast mode [ 310.391682][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 310.592806][ T5876] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 310.777045][ T9489] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 310.994695][ T5876] usb 2-1: config 5 has an invalid interface number: 168 but max is 0 [ 311.003299][ T5876] usb 2-1: config 5 has no interface number 0 [ 311.010527][ T9489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.021789][ T9489] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 311.034842][ T5876] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 311.047854][ T9489] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 311.057175][ T5876] usb 2-1: config 5 interface 168 has no altsetting 0 [ 311.064199][ T9489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.074633][ T5876] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=fc.58 [ 311.083849][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.098132][ T9489] usb 3-1: config 0 descriptor?? [ 311.103363][ T5876] usb 2-1: Product: syz [ 311.110671][ T5876] usb 2-1: Manufacturer: syz [ 311.123222][ T5876] usb 2-1: SerialNumber: syz [ 311.332381][ T9489] usbhid 3-1:0.0: can't add hid device: -71 [ 311.360839][ T9489] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 311.389818][ T9489] usb 3-1: USB disconnect, device number 39 [ 311.448041][T11891] syzkaller0: entered promiscuous mode [ 311.455602][T11891] syzkaller0: entered allmulticast mode [ 311.462157][T11893] netlink: 'syz.4.2321': attribute type 10 has an invalid length. [ 312.132825][ T5876] usb 2-1: USB disconnect, device number 36 [ 312.885784][T11893] syz_tun: entered promiscuous mode [ 312.893695][T11893] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 313.164277][T11897] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.172022][T11897] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.222792][T11897] team_slave_0: left promiscuous mode [ 313.228354][T11897] team_slave_1: left promiscuous mode [ 313.617833][T11897] batadv_slave_0: left promiscuous mode [ 313.639182][T11897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.185179][T11897] bond2: left promiscuous mode [ 314.194708][T11897] bond2: left allmulticast mode [ 314.209043][T11901] syzkaller1: entered promiscuous mode [ 314.219539][T11901] syzkaller1: entered allmulticast mode [ 314.244551][T11914] syzkaller0: entered promiscuous mode [ 314.254654][T11914] syzkaller0: entered allmulticast mode [ 314.277581][ T490] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.349904][ T490] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.360135][ T490] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.392897][ T490] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.615936][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 314.615953][ T29] audit: type=1326 audit(1774494913.343:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a78f9c799 code=0x0 [ 314.712821][ T5905] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 314.732819][ T5877] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 314.882807][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 314.884779][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.889827][ T5905] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 314.899129][ T5877] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 314.907600][ T5905] usb 2-1: config 0 has no interface number 0 [ 314.916977][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.925882][ T5905] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 314.940635][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.947795][ T5877] usb 5-1: config 0 descriptor?? [ 314.948924][ T5905] usb 2-1: Product: syz [ 314.958003][ T5905] usb 2-1: Manufacturer: syz [ 314.964150][ T5905] usb 2-1: SerialNumber: syz [ 314.971095][ T5905] usb 2-1: config 0 descriptor?? [ 314.978593][ T5905] hub 2-1:0.132: bad descriptor, ignoring hub [ 314.992758][ T5905] hub 2-1:0.132: probe with driver hub failed with error -5 [ 315.013430][ T5905] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input32 [ 315.166208][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2333'. [ 315.394569][T11938] syzkaller0: entered promiscuous mode [ 315.400251][T11938] syzkaller0: entered allmulticast mode [ 315.576513][ T5877] usbhid 5-1:0.0: can't add hid device: -71 [ 315.592883][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 315.605294][ T5877] usb 5-1: USB disconnect, device number 35 [ 317.107338][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.113979][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.762770][ T5905] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 317.917383][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 317.934682][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 317.952769][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.961649][ T5905] usb 3-1: Product: syz [ 317.969459][ T5905] usb 3-1: Manufacturer: syz [ 317.975541][ T5905] usb 3-1: SerialNumber: syz [ 317.984089][ T5905] usb 3-1: config 0 descriptor?? [ 318.056365][ T5178] usb 2-1: reset high-speed USB device number 37 using dummy_hcd [ 318.066873][ T5178] usb 2-1: device reset changed ep0 maxpacket size! [ 318.076923][ T5906] usb 2-1: USB disconnect, device number 37 [ 318.203314][ T5905] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 318.228048][T12001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.303108][ T5906] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 318.314103][T12001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.326401][T12001] tipc: Disabling bearer [ 318.473369][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 318.509161][ T5906] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 318.518985][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.539402][ T5906] usb 2-1: config 0 descriptor?? [ 318.611299][ T5906] as10x_usb: device has been detected [ 318.634753][ T5906] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 318.683518][ T5906] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 318.758649][T11991] ------------[ cut here ]------------ [ 318.764382][T11991] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 318.764407][T11991] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300, CPU#0: syz.1.2355/11991 [ 318.780548][T11991] Modules linked in: [ 318.784508][T11991] CPU: 0 UID: 0 PID: 11991 Comm: syz.1.2355 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.795581][T11991] Tainted: [L]=SOFTLOCKUP [ 318.799934][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.810073][T11991] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 318.816058][T11991] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 a1 61 04 00 75 13 48 8d 3d 1c b7 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 318.835969][T11991] RSP: 0018:ffffc9001c71fa20 EFLAGS: 00010246 [ 318.842038][T11991] RAX: 0000000000000000 RBX: 1ffff920038e3f5c RCX: 0000000000080000 [ 318.850230][T11991] RDX: ffffc9000cf49000 RSI: ffffffff8bcce0c0 RDI: ffffffff9014fc10 [ 318.858253][T11991] RBP: ffffc9001c71fbd8 R08: ffffffff9011e6c3 R09: 1ffffffff2023cd8 [ 318.866273][T11991] R10: dffffc0000000000 R11: fffffbfff2023cd9 R12: ffff888025bc6b60 [ 318.874308][T11991] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.882307][T11991] FS: 00007fb1933f66c0(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 318.891345][T11991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.897971][T11991] CR2: 0000001b3081fff8 CR3: 000000004e1b0000 CR4: 00000000003526f0 [ 318.906071][T11991] Call Trace: [ 318.909359][T11991] [ 318.912312][T11991] ? __mutex_lock+0x319/0x1300 [ 318.917111][T11991] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 318.922900][T11991] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 318.929898][T11991] ? __pfx___mutex_lock+0x10/0x10 [ 318.935117][T11991] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 318.940946][T11991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 318.947023][T11991] ? do_raw_spin_lock+0x12b/0x2f0 [ 318.952064][T11991] as102_dvb_dmx_start_feed+0x70/0x290 [ 318.957572][T11991] dmx_section_feed_start_filtering+0x518/0x6c0 [ 318.963886][T11991] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 318.969459][T11991] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 318.974982][T11991] dvb_demux_do_ioctl+0x470/0x540 [ 318.980048][T11991] dvb_usercopy+0x199/0x2e0 [ 318.984641][T11991] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 318.990206][T11991] ? __pfx_dvb_usercopy+0x10/0x10 [ 318.995273][T11991] ? __fget_files+0x3a0/0x420 [ 318.999987][T11991] ? __fget_files+0x2a/0x420 [ 319.005319][T11991] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 319.010885][T11991] dvb_demux_ioctl+0x29/0x40 [ 319.015627][T11991] __se_sys_ioctl+0xfc/0x170 [ 319.020246][T11991] do_syscall_64+0x14d/0xf80 [ 319.024909][T11991] ? trace_irq_disable+0x3b/0x150 [ 319.030100][T11991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.036237][T11991] ? clear_bhb_loop+0x40/0x90 [ 319.040931][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.046968][T11991] RIP: 0033:0x7fb19519c799 [ 319.051395][T11991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.071109][T11991] RSP: 002b:00007fb1933f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.079626][T11991] RAX: ffffffffffffffda RBX: 00007fb195415fa0 RCX: 00007fb19519c799 [ 319.087689][T11991] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 319.095771][T11991] RBP: 00007fb195232c99 R08: 0000000000000000 R09: 0000000000000000 [ 319.103807][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.111980][T11991] R13: 00007fb195416038 R14: 00007fb195415fa0 R15: 00007fb19553fa48 [ 319.120271][T11991] [ 319.123378][T11991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.130656][T11991] CPU: 0 UID: 0 PID: 11991 Comm: syz.1.2355 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.141595][T11991] Tainted: [L]=SOFTLOCKUP [ 319.145905][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.155957][T11991] Call Trace: [ 319.159235][T11991] [ 319.162154][T11991] vpanic+0x56c/0xa60 [ 319.166133][T11991] ? __pfx__printk+0x10/0x10 [ 319.170735][T11991] ? __pfx_vpanic+0x10/0x10 [ 319.175230][T11991] ? is_bpf_text_address+0x292/0x2b0 [ 319.180523][T11991] ? is_bpf_text_address+0x26/0x2b0 [ 319.185713][T11991] panic+0xc5/0xd0 [ 319.189430][T11991] ? __pfx_panic+0x10/0x10 [ 319.193835][T11991] __warn+0x315/0x4f0 [ 319.197964][T11991] ? __mutex_lock+0x10a4/0x1300 [ 319.202818][T11991] ? __mutex_lock+0x10a4/0x1300 [ 319.207684][T11991] __report_bug+0x29a/0x540 [ 319.212182][T11991] ? rcu_is_watching+0x15/0xb0 [ 319.216938][T11991] ? __mutex_lock+0x10a4/0x1300 [ 319.221785][T11991] ? __pfx___report_bug+0x10/0x10 [ 319.226894][T11991] ? __mutex_lock+0x10a4/0x1300 [ 319.231737][T11991] report_bug_entry+0x19a/0x290 [ 319.236576][T11991] ? __mutex_lock+0x10ab/0x1300 [ 319.241418][T11991] ? __mutex_lock+0x10b0/0x1300 [ 319.246256][T11991] handle_bug+0xce/0x200 [ 319.250492][T11991] exc_invalid_op+0x1a/0x50 [ 319.254986][T11991] asm_exc_invalid_op+0x1a/0x20 [ 319.259915][T11991] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 319.265374][T11991] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 a1 61 04 00 75 13 48 8d 3d 1c b7 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 319.284976][T11991] RSP: 0018:ffffc9001c71fa20 EFLAGS: 00010246 [ 319.291076][T11991] RAX: 0000000000000000 RBX: 1ffff920038e3f5c RCX: 0000000000080000 [ 319.299057][T11991] RDX: ffffc9000cf49000 RSI: ffffffff8bcce0c0 RDI: ffffffff9014fc10 [ 319.307120][T11991] RBP: ffffc9001c71fbd8 R08: ffffffff9011e6c3 R09: 1ffffffff2023cd8 [ 319.315106][T11991] R10: dffffc0000000000 R11: fffffbfff2023cd9 R12: ffff888025bc6b60 [ 319.323088][T11991] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.331076][T11991] ? __mutex_lock+0x319/0x1300 [ 319.335855][T11991] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 319.341591][T11991] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 319.348021][T11991] ? __pfx___mutex_lock+0x10/0x10 [ 319.353064][T11991] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 319.358710][T11991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 319.364701][T11991] ? do_raw_spin_lock+0x12b/0x2f0 [ 319.369718][T11991] as102_dvb_dmx_start_feed+0x70/0x290 [ 319.375204][T11991] dmx_section_feed_start_filtering+0x518/0x6c0 [ 319.381446][T11991] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 319.387018][T11991] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 319.392498][T11991] dvb_demux_do_ioctl+0x470/0x540 [ 319.397542][T11991] dvb_usercopy+0x199/0x2e0 [ 319.402069][T11991] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 319.407627][T11991] ? __pfx_dvb_usercopy+0x10/0x10 [ 319.412661][T11991] ? __fget_files+0x3a0/0x420 [ 319.417353][T11991] ? __fget_files+0x2a/0x420 [ 319.421959][T11991] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 319.427243][T11991] dvb_demux_ioctl+0x29/0x40 [ 319.431846][T11991] __se_sys_ioctl+0xfc/0x170 [ 319.436440][T11991] do_syscall_64+0x14d/0xf80 [ 319.441029][T11991] ? trace_irq_disable+0x3b/0x150 [ 319.446081][T11991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.452146][T11991] ? clear_bhb_loop+0x40/0x90 [ 319.456824][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.462721][T11991] RIP: 0033:0x7fb19519c799 [ 319.467138][T11991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.486845][T11991] RSP: 002b:00007fb1933f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.495362][T11991] RAX: ffffffffffffffda RBX: 00007fb195415fa0 RCX: 00007fb19519c799 [ 319.503342][T11991] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 319.511329][T11991] RBP: 00007fb195232c99 R08: 0000000000000000 R09: 0000000000000000 [ 319.519311][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.527364][T11991] R13: 00007fb195416038 R14: 00007fb195415fa0 R15: 00007fb19553fa48 [ 319.535348][T11991] [ 319.538666][T11991] Kernel Offset: disabled [ 319.542977][T11991] Rebooting in 86400 seconds..